PT-2020-14174 · Typo3 · Extbase+2

Oliver Hader · Published 2020-07-29 · Updated 2021-11-18 · CVE-2020-15086

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 "mediace" extension versions 7.6.2 through 7.6.4

Description A flaw in the internal verification mechanism of the "mediace" extension allows attackers to generate arbitrary checksums, enabling them to inject arbitrary data with a valid cryptographic message authentication code. This can lead to remote code execution. An attacker must have access to at least one Extbase plugin or module action in a TYPO3 installation to exploit this issue.

Recommendations For TYPO3 "mediace" extension versions 7.6.2 through 7.6.4, update to version 7.6.5 to resolve the issue.

Exploit

Fix

Deserialization of Untrusted Data

Information Disclosure

RCE

Weakness Enumeration

CWE-502

CWE-200

CWE-325

CWE-20

Related Identifiers

CVE-2020-15086

GHSA-4H44-W6FM-548G

Affected Products

Extbase

Typo3

Mediace

References · 9

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsoftypo3/mediace/CVE-2020-15086.yaml · Exploit
• 🔥 https://github.com/FriendsOfTYPO3/mediace/security/advisories/GHSA-4h44-w6fm-548g · Exploit
• https://github.com/FriendsOfTYPO3/mediace/pull/31 · Patch
• https://github.com/FriendsOfTYPO3/mediace/commit/fa29ffd3e8b275782a8600d2406e1b1e5e16ae75 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-15086 · Security Note
• https://osv.dev/vulnerability/GHSA-4h44-w6fm-548g · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15086 · Vendor Advisory
• https://github.com/FriendsOfTYPO3/mediace · Note
• https://typo3.org/security/advisory/typo3-ext-sa-2020-014 · Note